ZDI-26-697: Linux Kernel NTFS3 Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-26-697: Linux Kernel NTFS3 out-of-bounds read rated CVSS 7.3 lets local low-privileged attackers disclose sensitive information.
ZDI advisory ZDI-26-697 describes an out-of-bounds read in the Linux Kernel NTFS3 driver rated CVSS 7.3. An attacker must first be able to execute low-privileged code on the target system to exploit the flaw. Successful exploitation leads to sensitive information disclosure. No CVE identifier is listed in the advisory.
- Out-of-bounds read in Linux Kernel NTFS3 driver
- CVSS 7.3, local information disclosure
- Requires prior low-privileged code execution
- No CVE assigned in advisory text
From the original article
This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.